Default CSRF validation with django

Question

Default CSRF validation with django

tiagob opened this issue 12 years ago · 5 comments

tiagob commented 12 years ago

In heavy_data.js your overriding the cookie which is used for CSRF in django forms.

Form submission fails with:
Forbidden (403)
CSRF verification failed. Request aborted.

Reason given for failure:
CSRF cookie not set.

Answer 1 · 2013-01-11T04:00:43.000Z

Can you please provide more details? I did not see this problem before.

Answer 2 · 2013-01-11T19:28:12.000Z

I have 188 selected values. I'm using google chrome. It seems that my document.cookie can only take 75 of them before it starts replacing the ones it just set and the csrf token too in setCookie in heavy_data.js.

Answer 3 · 2013-01-11T21:24:22.000Z

I got it working by replacing the cookie code in heavy_data.js with https://github.com/marcuswestin/store.js

Answer 4 · 2013-01-12T02:34:08.000Z

Oops. Good catch! Yes there is usually a max limit of 4KB limit on cookies. In your case you are hitting that at 75 elements. I will incorporate your suggestion in heavy_data.js.

Answer 5 · 2013-01-13T18:13:59.000Z

Please update to latest version. Noe django_select2 does not use cookies or localStorage at all.